nate158g-m-w-n-l-p-d-a-o-e

nate158g-m-w-n-l-p-d-a-o-e Questo modulo richiede Metasploit: https://metasploit.com/download Sorgente corrente: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Wordpress Popular Posts Authenticated RCE', 'Description' = %q This exploit requires Metasploit to have a FQDN an...

cve-2026-13934

CVE-2026-13934 Questo è il repository del progetto di lavoro. Indagini, analisi, attività e report vengono gestiti in un unico repo D088/D091. Questo file è il documento di ingresso per repo e board. Per il testo completo delle convenzioni su cartelle e artefatti, consulta docs/conventions.md. Il...

boa-cve-2009-4496-analysis

CVE-2009-4496 — Analisi Difensiva della Vulnerabilità Panoramica Questo repository documenta un'analisi difensiva di CVE-2009-4496 , una vulnerabilità storica associata al web server Boa. L'obiettivo di questo progetto è esaminare la vulnerabilità da una prospettiva di sicurezza difensiva...

CVE-2026-33267-PoC

CVE-2026-33267 — Apache Traffic Server intestazione @ non attendibile → spoofing dei metadati interni CVSS 10.0 Critico · CWE-20 · GHSA-jrh6-9hgv-mqm7 Riepilogo Apache Traffic Server riserva le intestazioni con prefisso @ @Ats-Internal, @ICAP-Status, @TCPInfo, ... per i metadati interni : risiedo...

GHSA-X8MJ-6P3Q-G5PP free5GC NRF nnrf-nfm lacks NF Profile input validation — enables NF Registration Poisoning with arbitrary service endpoints

Summary free5GC NRF Docker image free5gc-fuzz:latest accepts NF registration requests without validating any field constraints against 3GPP TS 29.510, allowing unauthenticated attackers to inject fake NF profiles with arbitrary service endpoint IP addresses. All 17 constraint violations tested UU...

free5GC NRF nnrf-nfm lacks NF Profile input validation — enables NF Registration Poisoning with arbitrary service endpoints

Summary free5GC NRF Docker image free5gc-fuzz:latest accepts NF registration requests without validating any field constraints against 3GPP TS 29.510, allowing unauthenticated attackers to inject fake NF profiles with arbitrary service endpoint IP addresses. All 17 constraint violations tested UU...

CVE-2026-55068

free5GC (open-source 5G core network) version 4.2.2 and earlier is vulnerable to NF Registration Poisoning in the NRF component. The RegisterNFInstance handler (PUT /nnrf-nfm/v1/nf-instances/{nfInstanceID}) accepts NF profile bodies without enforcing 3GPP TS 29.510 constraints for UUID format, nf...

CVE-2026-55068 free5GC: NRF nnrf-nfm lacks NF Profile input validation — enables NF Registration Poisoning with arbitrary service endpoints

free5GC is an open-source implementation of the 5G core network. In 4.2.2 and earlier, the NRF RegisterNFInstance handler at PUT /nnrf-nfm/v1/nf-instances/nfInstanceID accepts NF Profiles without enforcing UUID format, nfStatus enum values, heartBeatTimer ranges, mandatory profile fields, or...

CVE-2024-9047

POC - Plugin WordPress File Upload, nel file wfufiledownloader.php prima della versione = 4.24.11 - CVE-2024-9047 Panoramica Il plugin WordPress File Upload è vulnerabile a causa di una convalida degli input impropria nel file wfufiledownloader.php, che interessa le versioni = 4.24.11. Questa...

CVE-2026-0848

CVE-2026-0848 — NLTK StanfordSegmenter: Esecuzione di Codice Arbitrario tramite Caricamento di JAR Non Attendibili -red?style=for-the-badge -brightgreen?style=for-the-badge Panoramica...

CVE-2026-33910_SqlInjectionVulnerabilityOpenEMR8.0.0.2

CVE-2026-33910 - Vulnerabilità di SQL Injection in OpenEMR Debolezza CWE-89 Neutralizzazione impropria degli elementi speciali usati in un comando SQL 'SQL Injection' Il prodotto costruisce tutto o parte di un comando SQL utilizzando input influenzati esternamente da un componente a monte, ma non...

CVE-2026-32127_SqlInjectionVulnerabilityOpenEMR8.0.0

CVE-2026-32127 - SQL-Injection-Schwachstelle in OpenEMR 8.0.0 Schwachstelle CWE-89 Unsachgemäße Neutralisierung spezieller Elemente, die in einem SQL-Befehl verwendet werden 'SQL Injection' Das Produkt erstellt eine SQL-Anweisung ganz oder teilweise unter Verwendung extern beeinflusster Eingaben...

CVE-2026-29187_SqlInjectionVulnerabilityOpenEMR7.0.4

CVE-2026-29187 - SQL-Injection-Schwachstelle im neuen Such-Popup Schwachstelle CWE-89 Unsachgemäße Neutralisierung von Sonderelementen, die in einem SQL-Befehl verwendet werden 'SQL Injection' Das Produkt erstellt einen SQL-Befehl ganz oder teilweise anhand extern beeinflusster Eingaben einer...

BIT-TOMCAT-2026-65637 Apache Tomcat: HTTP/2 no-authority bypass of strict SNI validation - CVE-2026-32990 fix incomplete

Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990. This issue affects Apache Tomcat: from 11.0.20 through 11.0.24, from 10.1.53 through 10.1.57, from 9.0.115 through 9.0.120. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121,...

Chromium: CVE-2026-79109 Improper input validation in Printing

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-78963 Improper input validation in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79151 Improper input validation in Safebrowsing

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79025 Improper input validation in Workers

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79000 Improper input validation in DeviceBoundSessionCredentials

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79182 Improper input validation in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...